CLAIMS 

1. (ORIGINAL) A method of generating successive round keys of an expanded kev 
from an initial cnpiooraphv U- for use in an en, r> prion am; . r de,:'v P t ; on engine. 

> t 

stoi g the Nk words the initial key in Nk I tonsof amemor; 

providing the initial key to a cryptographic engine lor performing a first 
cryptographic round; 

' 1 « selected first \ se* < a - < vord of the 

1 ! - - < s e i is retrieved from th* sod generat 

from the selected t s iftseo.jn -„ se-n-eme^ ' * o the 

expended key; 

pan UJng the generated words of the «»pandcd kc> to the or \ ptographie 
engine as round keys for performing subsequent cryptographic rounds; and 

st * m ! s 

cyclically overwriting previously generated words of the expanded k , 

2. (ORIGINAL) The method of claim 1 in which the step of Overwriting 

pre\ , mh genes ed words o > occurs after those words a e >een used ssa < first 
and/or said second selected words in the step of generating a respective subsequent 
word. 

3. (ORIGINAL) The method of claim i in which the number of memory 
locations used is less than the number of words in the expanded key, 

4. (ORIGINAL) The method of claim 1 in which the number of memory 
locations used is equal toNk. 

5. (ORIGIN AL) The method of claim 4 in which the words of the initial 

key are also overwritten by words of the expanded key during the overwriting step. 

i 1 ! 1 < j i- ! }j \ 

locations used is equal to .fNk. 

7. (ORIGINAL) The method of claim I in which the memory is divided 

into two p a first pa it kc\ d the second p receiving die 

successively generated words of the expanded key. 

8 (ORIC NAI e method ol i i ilng the step of 

f ke\ is store 1 in 

the second part of the memory and the initial key is still stored in the first part of the 
memory. 

9. (ORIGINAL) The method of claim 8 further including the step of 

performing a repeat key expansion starting with the initial key stored in the first part 

of the memory. 

v . s ~ i!NAL)The method of claim 8 further int d t the step of 
performing an inverse key expansion starting with the final round key stored in the 
second part of the memory, 
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I (Previously Presented,! The method of any one of claims 1 further including the 
vtp - . \ - xscd key s ad; 

that the final round key is stored in the memory and the initial key has been 
overwritten. 

' - ^ i 1 : i 1l Jv J i ' 1,-K.f f w <. SJ Stv'J O l 

1 f< ersc eyexna sk t ! e al roun le •.ore n the 

memory in order to regenerate the initial key for a subsequent cryptographic 
operation. 

13. (ORIGINAL) The method of claim 7 in which the number of memory 
locations used is equal to 2Nk, the first and the second parts having Nk locations 
each. 

14. (ORIGIN AI To. ... i t t _ ! s in which the step oi 

ge erat su essix ; 1 et en rds \ e exf e^ e co p enerat g 
successive words of the AES ndaeS blot die c i k ice ii \ES 
key expansion function. 

15. (ORIGINAL) The method of claim 14 in which Nk = g. 

« ^ i bsequen 

words of the expanded key comprise words of 
encryption round keys. 

17. (Previously Presented.) The method of claim 1 in which the successive subsequent 
words oi i ie exp e ed ve co.mp e 
words of decryption round keys, 

IS. (ORIGINAL) The method Of cWm t In which the step of providing 
the generated words of the expanded key to the cryptographic engine comprises 
providing the words on a word-by-word basis as the cryptographic engine consumes 
the words as round keys. 

19. (ORIGINAL! 1 he method of claim i in which, in she retri \ ■ . tep, 

>oth the selected f ord and tl ected second v, e retriev* from the 
memory. 

20. (ORIGINAL.) The method of claim 1 in which, in the retrieving step, 

the selected first word is retrieved from memory and the selected second word Is 
retrieved from a register used in a previous iteration. 

21. (ORIGINAL) The method of claim I in which the step of providing 

1 ^ i. i CO % \ 01 i - - t ' •> s v s 

providing said generated words from the memory. 

22. (ORIGINAL) The method of claim I in which the step of generating 

includes, in at least some cycles of round ke\ vord i seratio du U >f performing 
an S-box transform using an S-box shared with the cryptographic engine. 
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23. (ORIGINAL) The method ofcMm 22 further including the step of 

in g syi c iron sirs of the gene s ccess ve nund ?.e> wu.us with 

5 is n t r .» t e 1 u key t ds b> e eng c 

24. (ORIGINAL) A round key generator for generating successive round 
keys o an expa vi n j L ^ * 
i decryption engii omprising 

a memory for storing the Nk words of the initial key; 

an expansion processor for repeatedly retrieving a selected first word and a 
selected second word of the expanded key. at least one of which is retrieved from the 
memory, and generating f rom the selected first and second words a successive 
si >seqi t-> of the exj ded kc 

v t k >t -l , „v C C. \ ) t O t luOdHo -Os O } K 

cryptographic engine as round keys tor performing subsequent cn ptographic rounds: 

t em o [ w - -one . h n i v s 1 w., ie a, 
memory by cyclically overwriting previously generated words of the expanded key, 

25. (ORIGINAL) The apparatus of claim 24 further including control 

meum :or ^ns; > - wwT :■ mumou 'oergs ; :! e s \ «. enb after those words 
have been usee i sail I tunc -w sees id selected words >y the expansion 
processor. 

26. (ORIGINAL) The apparatus of claim 24 ia which the number of word 
locations in memory is less than the number of words in the expanded key. 

27. (ORIGINAL; The apparatus of claim 24 in which the number of word 
locations in the memory is equal to Nk. 

28. (ORIGINAL) fhe apparatus of claim 27 in which dm words of the 

initial key are also overwritten by words of the expanded key during the overwriting. 

29. (ORIGINAL) The apparatus of claim 24 in which the number of word 
locations in the memory Is equal to 2Nk. 

30. (ORIGINAL) The apparatus of claim 24 in which the memory is 

\o and the » 
the successively generated words of the expanded fey. 

3LfORRV\\. pwrntus of ciasm 30 

storing stores the final round key in the second nan of the memory and retains the 
initial key in the first part of the memory after completion of generation of the 
up •but key 

32, (ORIGINAL) The apparatus of claim 31 Luther Including means for 

perl min a epe; "'-o e p 1 the first p 

of the memory. 

S3 (ORIGIN AJ he appar s oft i eans for 

performing art inverse key expansion starting with the final round key stored in the 
second past of the memory. 
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34. (Previously Presented) The apparatus of any one of claim 24 further including 
means for conmledng generation t»f the expanded key such that the Tina! round key is 
stored in the memory and the initial key has been overwritten. 

35. (ORIGINAL) The apparatus of claim 34 further including means for 
performing an inverse ke> expansion starting with the final round kc\ stored in the 

if ! v. ! i K \ <. > "I 

operation. 

36. ^ORIGIN M) The apparatus of ctaun 30 in which the number ot word 
locations n memory is eqt o 2'Nk, the firs t aving Nk 
locations each. 

37. (deviously Presented) The apparatus of any -preceding 

24 in which the expansion processor includes means for generating 

successive words of the V S Rijndael bkx k > phet i >und v > ace; rd m to li e \ES 

kes e vj n - 1 v. 

38. (ORIGINAL) The apparatus of claim 37 in which Nk -t. 

39. (CURRENTLY AMENDED) The apparatus of Claim 24 in which the expansion 
processor generates words of encryption round keys. 

40. (Previously Presented) The apparatus of claim 24 in which the expansion key 
processor generates words of decryption 

round keys. 

41 (ORIGIN \ ! j 1 h >hic engine 

0 ! C 1! U id v O 1 J x 1 

cryptographic engine on a word-by-word basis as the cryptographic engine consumes 
the words as round keys. 

2. (ORIGIN A )t claim 2 \ further including means for retrieving 

both the ■ selected first : wo? nd elect*, com >rc . he memory. 

4> '<M < P V v " i s n A - i x n , i , _ f ! >ei cMue e 
selected first word from memory and the selected second word from a register in the 
expansion processor. 

44. (Previously Presented) The apparatus of claim * ding tographk 
t^gn'x o . tre m S- 
hox. 

45. (« JRIGINAL) The apparatus of claim •; ■; further including the means 

r maintaining synchro of the es - pr ryptographic 
engine. 

46. (Previously Presented) A smart card incorporating the round key 
generator according to claim 24. 
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47 (ORIGINAL )A method or generao ig aiccc «l\e round ke> words of an 
expanded key, from m initial key, which method maintains the generated successive 

i d * ern^r U t si ^ sd e i e v j j u 

the generation of successive round kes words and for use in the wailel operatk n of 

48. (ORIGINAL) The method of claim 47 in which the initial key words 
s n e mcmor> i e oce « enerath 

expanded key. 

49-54 (Cancelled) 
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